Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14c8aabb-d422-3061-bd01-1766ef8c5e42.roa
File:                     14c8aabb-d422-3061-bd01-1766ef8c5e42.roa (raw, json)
Hash identifier:          NOhfrRJOJAGJstLIodep/afazoZ/1pLlCZyCeFGWVjU=
Subject key identifier:   7A:F3:68:4F:2E:10:DD:DA:78:DA:25:D2:E5:B1:7D:B1:0B:78:3B:21
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DA3E5617F0FA4830A22908B80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14c8aabb-d422-3061-bd01-1766ef8c5e42.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     852
IP address blocks:        173.182.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:61:7f:0f:a4:83:0a:22:90:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=9af8b896-d9a4-4c26-9104-1c6d709ea2a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:dd:19:32:3d:d1:10:05:cf:9a:94:0c:fd:
                    15:b5:db:4e:61:21:94:8d:ce:4f:be:5f:a1:48:4b:
                    bf:35:02:cd:0b:b3:4a:b2:2a:42:06:f6:88:4a:d3:
                    7d:9c:96:bd:0e:1b:24:bc:29:56:9e:1a:2c:22:23:
                    93:3c:c0:6e:ba:46:35:f4:26:74:0c:d0:33:17:17:
                    02:97:bd:04:3e:3c:f8:31:8c:e5:e8:3f:eb:da:c8:
                    28:cd:a6:bc:6d:df:8e:6f:a8:f3:b5:f4:ee:04:53:
                    13:ff:2a:bb:87:32:4d:02:08:17:52:ee:4a:95:ce:
                    82:a3:40:42:07:75:c7:6d:ab:42:7b:a4:42:5e:cd:
                    db:73:20:79:5a:d8:43:45:24:6d:f6:36:e9:62:5d:
                    55:4c:6b:48:b2:49:4a:3d:aa:96:49:59:ba:c3:c0:
                    eb:de:2a:94:f9:31:df:6e:ba:0d:ea:c3:c7:cd:09:
                    00:38:cf:e7:37:2d:76:80:d3:98:10:20:81:01:98:
                    62:72:44:85:42:7c:d5:70:8f:63:44:70:fc:ae:c9:
                    e2:cc:81:35:9d:95:a3:90:cc:d1:c2:b0:b4:f0:be:
                    10:2b:af:a4:ac:34:f1:c1:1f:d8:60:1d:ef:21:f1:
                    22:be:35:40:78:39:f1:45:04:49:2c:61:32:eb:8a:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F3:68:4F:2E:10:DD:DA:78:DA:25:D2:E5:B1:7D:B1:0B:78:3B:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14c8aabb-d422-3061-bd01-1766ef8c5e42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.182.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:dc:35:55:49:88:54:e2:ea:e9:c6:c2:7d:12:2c:e9:b1:bf:
         51:90:2d:84:76:0b:b2:37:5d:cf:7d:18:a4:35:98:40:7c:cd:
         15:8a:99:20:b6:d8:90:5c:18:53:8d:70:77:a6:2c:ae:d8:e8:
         8d:11:32:f0:7c:41:42:ed:16:24:ae:41:f5:ca:11:93:24:37:
         1f:98:94:27:46:08:14:9f:b7:f5:85:64:83:05:37:6b:37:ba:
         4e:db:20:f0:36:b3:f9:ca:c1:e6:5f:5c:08:0e:0f:7b:6f:ce:
         59:4d:fa:0b:78:e9:3c:1c:13:4d:db:10:eb:1b:0a:b2:da:88:
         cd:b9:b3:f7:c7:94:19:2a:04:db:c9:87:7a:3a:9d:64:43:a2:
         2c:70:e8:a9:74:95:9b:88:2c:07:09:f6:01:e8:ed:6d:27:be:
         1f:f0:b2:57:e3:b0:0c:f7:c3:ed:33:bf:06:8e:58:30:c5:21:
         02:00:e3:b6:f6:4f:e2:16:27:7a:55:ed:3d:34:56:39:ac:99:
         f9:7d:19:2f:f9:8b:73:8f:3c:49:0f:ee:05:a4:4a:b1:bb:ca:
         c2:3c:72:5c:8a:85:f5:82:fe:a1:d3:73:14:24:9f:29:14:71:
         5e:cf:13:a6:47:81:b0:c1:c1:8c:b9:c7:a2:33:ab:02:de:e0:
         9f:a1:df:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:45:16 2026 by rpki-client